WAN network architecture

[tiyyaabdure]

i want to connect WAN(branches of organization with vpn) to server farm firewall. is that design has problem? please if it has problem i.e connecting WAN to this internal  firewall please help me with reason. 

a. connect with core switch

b. connect with internal firewall 

c. connect with external firewall 

which one is preferable ???

[marce1000 · Accepted solution]

 - I would go for an option , not really described , terminate the vpn's on dmz-firewall , still with the possibility with policies to shield Intranet services and or not make an all-open design, by default.

 M.